Information System Security Officer (ISSO)

Dark Wolf Solutions is looking for an Information System Security Officer(ISSO) to lead the Assessment and Authorization (A&A) for multiple mission systems for the Advanced Battle Management System. The ISSO will drive a Continuous Authority to Operate mindset across the mission area. This position is located in Colorado Springs, CO with opportunity to be hybrid on-site/remote. 

Responsibilities include:

• Designs, tests, and implements secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, and incident response activities.
• Obtain continuous authority to operate for the PaaS solution.
• Work with customers to understand and obtain certification to field.
• Conducts risk and vulnerability assessment at the network, system and application level. 
• Develops and implements security controls and formulates operational risk mitigations along with assisting in security awareness programs. 
• Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Researches, evaluates and recommends new security tools, techniques, and technologies and introduces them to the enterprise in alignment with IT security strategy. 
• Utilizes COTS/GOTS and custom tools and processes/procedures in order to scan, identify, contain, mitigate and remediate vulnerabilities, and intrusions. Assists in the implementation of the required government policy (i.e., NISPOM,ICD 503), and makes recommendations on process tailoring. 
• Performs analyses to validate established security requirements and to recommend additional security requirements and safeguards. 
• Supports the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports. 
• Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.
• May support cyber metrics development, maintenance and reporting. 
• Provides briefings to senior staff and customers.